The vulnerability of the hardware abstraction driver of the software tool for determining processor characteristics allows attackers to exploit their privileges, disclose sensitive information, or cause service failures.

The vulnerability of the software-based hardware abstraction driver for the Intel Processor Identification Utility is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges, disclose sensitive information, or cause service failures...

The vulnerability of the setsystemparams procedure of the Ghostscript file conversion program allows a attacker to execute arbitrary commands or gain access to the file system.

The vulnerability of the setsystemparams procedure in the Ghostscript program for converting PostScript format files is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary commands or gain access to the file system ...

The vulnerability of the Smart Tunnel component of the microprogramming software for Cisco Adaptive Security Appliances allows a attacker to elevate their privileges to the root level.

The vulnerability of the Smart Tunnel component of the microprogramming software for Cisco Adaptive Security Appliances is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

The vulnerability of the SyncController.dll library on the Windows operating system allows a hacker to elevate their privileges and execute arbitrary code.

The vulnerability of the SyncController.dll library on the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code through a specially created application...

PT-2019-3052 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege in SyncController.dll, allowing an attacker to run arbitrary code with elevated privileges. To exploit this, an attacker would need to run ...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a attacker to cause the system to freeze or partially fail to operate.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause the system to become unresponsive or partially fail to operate...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Data Store component of the Oracle Berkeley DB database management system allows a hacker to gain full control over the system.

The vulnerability of the Data Store component of the Oracle Berkeley DB database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the system...

Open edX platform security feature issue vulnerability

The Open edX platform is an open source course management system CMS. The system can be used for MOOCs Massive Open Online Courses as well as smaller courses and training modules. A security feature issue vulnerability exists in the installation process in versions of Open edX prior to 2017-01-10...

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain access to modify, add, or delete data, or to cause service failures.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data, or cause service interruptions...

The vulnerability of the REST API implementation of the Cisco Application Policy Infrastructure Controller, which allows a hacker to elevate their privileges to the root level.

The vulnerability of the REST API implementation of the Cisco Application Policy Infrastructure Controller relates to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to root level by downloading maliciou...

The vulnerability of the installation mechanism for the software set for developing Intel Data Center Manager SDK allows unauthorized access, enabling attackers to enhance their privileges.

The vulnerability of the installation mechanism for the software development tools for Intel Data Center Manager SDK is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

The vulnerability of the Open Cloud Integrity Technology, a tool for creating cloud services, stems from deficiencies in access control within the certification database. This allows attackers to disclose protected information.

The vulnerability of the Open Cloud Integrity Technology, which is used to create cloud services, is related to deficiencies in access control within the certification database. Exploiting this vulnerability could allow attackers to disclose protected information...

The vulnerability of the PostgreSQL database management system, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Intel Converged Security and Management Engine, Server Platform Services and Trusted Execution Engine HECI subsystem privilege permission and access control issue vulnerability

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation.Intel Converged Security and Management Engine is a security management engine.Intel Server Platform Services SPS is a server platform service program.Intel Trusted Execution Engine is a trusted execution...

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in their lack of access control mechanisms. This allows attackers to carry out cross-site scripting attacks and increase their privileges.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and increase their privileges by using a specially crafted...

The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine allows attackers to enhance their privileges.

The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the FUSE file system implementation in the Cisco Application Policy Infrastructure Controller, which allows a hacker to elevate their privileges to root level.

The vulnerability of the FUSE file system implementation in the Cisco Application Policy Infrastructure Controller information infrastructure is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

The vulnerability of the Agent component of the Dr.Web anti-virus protection software, Dr.Web Enterprise Security Suite, allows a hacker to gain access to protected information.

The vulnerability of the Agent component in the Dr.Web anti-virus protection software, Dr.Web Enterprise Security Suite, is related to deficiencies in access control to named communication channels. Exploiting this vulnerability can allow attackers to gain access to information about user...

The vulnerability of the InnoDB component of the MySQL Database Server management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...